Lucene search

PRIOn knowledge basePRION:CVE-2009-1696

HistoryJun 10, 2009 - 6:00 p.m.

Session fixation

2009-06-1018:00:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

74.5%

JSON

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session.

CPENameOperatorVersion
safarieq1.1 mac
safarieq1.3.1 mac
safarieq3.2.3 mac
safarieq2.0.2 mac
safarieq3.1 mac
safarieq3.1.2 mac
safarieq3.0 mac
safarieq0.8 mac
safarieq2.0 mac
safarieq3.0.4 mac

Name	Operator	Version
safari	eq	1.1 mac
safari	eq	1.3.1 mac
safari	eq	3.2.3 mac
safari	eq	2.0.2 mac
safari	eq	3.1 mac
safari	eq	3.1.2 mac
safari	eq	3.0 mac
safari	eq	0.8 mac
safari	eq	2.0 mac
safari	eq	3.0.4 mac

Rows per page:

1-10 of 341

References

lists.apple.com/archives/security-announce/2009/jun/msg00002.html

lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

osvdb.org/55027

secunia.com/advisories/35379

secunia.com/advisories/43068

support.apple.com/kb/HT3613

support.apple.com/kb/HT3639

www.securityfocus.com/bid/35260

www.vupen.com/english/advisories/2009/1522

www.vupen.com/english/advisories/2009/1621

www.vupen.com/english/advisories/2011/0212

6.6 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

74.5%

JSON

Related for PRION:CVE-2009-1696